bonzoesc

30 ms·

271.
by bonzoesc 15y ago
It can be used to identify when pitot tubes have failed (200kt difference?), and to know that if altitude is stable and the pitch is reasonable that the airplane is in a relatively stable state aerodynamically. That said, I'm not an aeronau
272.
by bonzoesc 15y ago
The logic exists too, but it's stored in binders full of easily-updated paper checklists instead of hard-to-update computer software (hard-to-update because FAA certification takes time).
273.
by bonzoesc 15y ago
If /all/ the instruments are incorrect, you might be boned. However, there's gobs of instruments that can be used to paint a partial picture: GPS can be used for altitude and groundspeed in a pinch; there's accelerometers and gyroscopes in
274.
by bonzoesc 15y ago
> it sounds like the pilot was quite confident that pitching the nose up further would get him out of the stall I don't think it was confidence, just a semi-reflexive action (if too low, pull up) when there wasn't enough thrust or lift
275.
by bonzoesc 15y ago
> Cockpit component company Rockwell Collins, for example, made waves at this year’s Paris air show when it talked about developing a “panic button” for commercial airplanes that would give confused and stricken pilots the option of fli
276.
Advanced Sim City SNES Strategies -or- how old games work(incise.org)
1 points by bonzoesc 15y ago|0 comments
277.
by bonzoesc 15y ago
GitHub for work and dev environment configuration stuff, DropBox for 1Password credentials and public stuff, Time Machine (to a Time Capsule) for my home directory (except for media and VMWare images), CrashPlan (to their hosted service) fo
278.
by bonzoesc 15y ago
One for each person who wants to learn how to build them. I recommend building this kind of thing to other people pretty often.
279.
by bonzoesc 15y ago
Sums up my thoughts on vi: > Some people are saying that we ought to put an IBM PC on every desk in America to improve productivity. It won’t work. The special incantations you have to learn this time are the “slash q-zs” and things lik
280.
by bonzoesc 15y ago
> This looks both real and a pretty serious issue (I wonder how it went by almost a month without getting picked up by the security community). Followed by: > Not many people in the security community use Mac servers in such a way t
281.
by bonzoesc 15y ago
He's saying that since the issue doesn't affect many people it didn't get found right away. It is a serious security problem for businesses that use Mac OS X with LDAP. However, it's not a serious security problem for me.
282.
by bonzoesc 15y ago
Do you think Samsung could get an update out in under two months?
283.
by bonzoesc 15y ago
The algorithm's not the hard part; key management is.
284.
by bonzoesc 15y ago
PHP isn't a quiet backwater, it's a cutting-edge when you should have stable, well-tested code (security-related functions like crypt()), and a backwater when you want to be cutting-edge (object-oriented and functional paradigms).
285.
by bonzoesc 15y ago
http://chargen.matasano.com/chargen/2009/7/22/if-youre-typin... is the best reference. (Don't do it!)
286.
by bonzoesc 15y ago
The boost comes from when the attacker does not have the key; and when the attacker knows the plaintext, key recovery is still difficult. AES is designed to be fast.
287.
by bonzoesc 15y ago
> You seem to be thinking that when I say "implement", I mean, "building an AES core library from scratch". No. I mean properly using a well tested, totally sound AES library in a way that doesn't leave your application totally boned. C
288.
by bonzoesc 15y ago
I guess once SHA-3 is done, NIST better start research on the next symmetric cipher. The attack only knocks off two bits now, but attacks only get better with time. Note that you should be using accepted standards for key management anyways
289.
by bonzoesc 15y ago
He prepared 'em several days ago, but was waiting on CVE numbers for the vulnerabilities the three releases fix.
290.
by bonzoesc 15y ago
It's free and open-source. I doubt they have the budget for a viral marketing campaign.
291.
by bonzoesc 15y ago
Open-source software is about making software, not about staking claims to product areas and stroking egos. Linux Torvalds didn't ask for Andrew Tanenbaum's opinion before releasing Linux, and John Resig didn't send Sam Stephenson a pull re
292.
by bonzoesc 15y ago
I use the Phusion-provided .debs for REE on Ubuntu.
293.
by bonzoesc 15y ago
I don't see a pressing need to use RVM in production; when I deploy, I pick a Ruby version and stick with it unless there's a security issue, at which point I pull the updated REE package from Phusion/let Heroku figure it out. Considering t
294.
by bonzoesc 15y ago
It would be somewhat cool if ruby-build knew how to look for an rbenv folder to install rubies into, or if rbenv knew how to drive ruby-build to put rubies in the right directory, but otherwise it's pretty nice.
295.
by bonzoesc 15y ago
I guess not everyone is as altruistic as you, dedicating their time to societally useful things like talking about intercepting cell phone communications on HN.
296.
by bonzoesc 15y ago
> Also plenty of people on Sprint's network had full bars but could make absolutely no calls and data was extremely slow, but about half a block from the Rio everything worked perfectly again, now it could well be that they were handed
297.
by bonzoesc 15y ago
I think doing it in a place where people will (eventually) figure it out helps. Hav fun at someone's expense, but get the genie out of the bottle and in front of the public a bit faster so we know it can be done and get it fixed. Some of my
298.
by bonzoesc 15y ago
Saskatchewan is not only flat enough for you to watch your dog run away for three days, but also to have long-range wireless broadband. My high school in Florida had that around 2000, but it's not practical around hills (like much of the ru
299.
by bonzoesc 15y ago
Some more DEF CON tips: * Don't bring your computer everywhere; it's heavy, somebody can steal it, and you'll be worrying about your computer instead of having fun, drinking, and meeting people. * Go to the hardware hacking & lock picki
300.
by bonzoesc 15y ago
Some of my friends just bring burner phones ($50 for a Boost chirper) and go through the hassle of distributing new phone numbers for the weekend.

More ›